Skip to content

ci: standardize CI/CD onto the golden path - #39

Draft
AlexanderBrevig wants to merge 1 commit into
mainfrom
ci/standardize
Draft

ci: standardize CI/CD onto the golden path#39
AlexanderBrevig wants to merge 1 commit into
mainfrom
ci/standardize

Conversation

@AlexanderBrevig

Copy link
Copy Markdown
Contributor

Standardizes this repo's CI/CD onto the kvalitet golden-path variant.

📋 Flow & rationale: https://github.com/entur/team-kvalitet/blob/cf2e0a6cc5b68330aaf45d969e2d1fa2b407e201/CICD-FLOW.md

What changes

  • Only ci.yml + cd.yml (no build.yml split); ci deploys to dev/sbx on every PR.
  • Merge promotes the PR-built image to tst → prd (image promotion via git tag).
  • pr.yml validates the Conventional-Commit PR title.
  • Dependabot reuses CI after a human approval (with the correct token permissions).
  • All non-entur/* actions SHA-pinned (latest majors); workflows named CI / CD / PR.

🚧 Draft — for team review of the approach. Branch-protection rulesets / required checks are not changed in this PR.

- collapse build/ci/cd into ci.yml (PR + deploy dev) and cd.yml (promote tst->prd)
- ci auto-deploys to dev/sbx for non-dependabot PRs; dependabot reuses ci after approval
- pr.yml validates the PR title as a Conventional Commit (gha-meta verify-pr)
- Go library (Template D): ci.yml reproduces go.yml lint+build+test (golangci-lint v2.4,
  go build, go test -race) on pull_request + workflow_call, test job skips dependabot;
  go.yml removed (superseded by ci.yml)
- release.yml kept as-is: build + test (coverage) + SonarQube scan + gha-meta
  release_type:go is the library's cd
- dependabot-pr.yml reuses ci.yml after approval; codeql.yml and dependabot.yml
  (github-actions + gomod) kept unchanged

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant